MCP tool reference

This page documents the tool surface exposed at:

MCPhttps://mcp.assets.hoistai.com/mcp

Wire format is JSON-RPC 2.0 over streamable HTTP or SSE, depending on the host. Protected calls require OAuth consent and the matching scope. The list below mirrors the live tools/list response — these are the callable tools an agent sees on discovery.

Paid-search boundary.Tools that dispatch a billable register search (for example ppsr_search) carry a non-read-only annotation and must be confirmed before execution. An agent cannot silently trigger a billable search.

Start high-level.For a natural-language counterparty or asset question, prefer the intent tools (verify_counterparty, verify_payment_or_invoice, create_evidence_pack). They resolve identities and fan out to the right source checks. The narrow lookups (abn_lookup, ppsr_search) are for when you already have a resolved ABN, ACN, or serial number.

Counterparty and asset verification

verify_counterparty

Use this first for broader natural-language Australian company or counterparty due-diligence questions — especially asks involving GST, ASIC, PPSR, risk flags, cross-source consistency, or “does X have PPSR registrations?” Resolves business_name to ABN/ACN where possible before any raw PPSR search, then checks whether a counterparty is real, currently active, and consistent across authoritative Australian registers (ABR / ASIC / PPSR — org-only). Returns a compact Evidence Card with a verdict, risk flags, and per-source check rows. Pass at least one of abn, acn, or business_name; address, email_domain, and phone are optional supplementary context. Not for ABN-only asks — use abn_lookup for those.

ppsr_search

Search the Australian Personal Property Securities Register (PPSR) by organisation (ACN) or by serial number (VIN / motor vehicle / aircraft / watercraft). Org-only; never searches individuals. This is the raw search tool and requires a resolved ACN or serial number — if the user supplied a company or trading name, or asked a broad counterparty question, call verify_counterparty first. Use op="preview" for a price quote without hitting the register, and op="search" to run the actual lookup (which persists the certificate to the audit trail and charges the standard AFSA fee). Results are bounded to the exact ACN or serial searched and do not prove broad asset clearance. Paid — confirm before executing.

verify_payment_or_invoice

Extract and sanity-check payment or invoice details from flat fields or untrusted invoice text. Returns a needs-review card, the account-control disclaimer, and a pending-confirmation prompt when a paid PPSR or asset search would be required. Does not run paid searches itself.

verify_professional

Verify a person against the applicable ASIC public register for the selected kind — financial_adviser, banned_disqualified_person, liquidator, afs_representative, credit_representative, registered_auditor, or smsf_auditor. Returns a summary-first answer card and a table containing only the applicable data source checked.

Business identity

abn_lookup

Look up an Australian Business Number against the Australian Business Register. Returns the entity name, type, status, and registered-address summary. Use for ABN-only or ABR-only asks such as entity name, ABN status, and entity type. Org-only — never searches individuals. Free, no per-call cost.

company_lookup

Look up an Australian company in the ASIC Companies public snapshot by ACN, ABN, or exact normalised company name. Returns plain_english_answer and source_citation with a visible source URL. This is not a general due-diligence resolver — it does not dispatch live ASIC, ABR name search, or paid searches, and a no-match can mean the public snapshot is stale. For natural-language questions such as “is this company active?”, call verify_counterparty first.

verify_business_name_registration

Verify an ASIC business-name public-snapshot row by exact, alternate, or deterministic normalised name. Returns plain_english_answer and source_citation with a visible source URL for human citation. Uses stored source snapshots where available; does not dispatch live or paid ASIC searches.

asic_licence_lookup

Look up an ASIC AFSL or Australian Credit Licence status from fixture-backed data. Returns plain_english_answer, source_citation, source_url, and source_reference for visible human citation. No live ASIC dispatch; paid current extracts require explicit confirmation.

lookup_address

Look up an Australian address against the versioned G-NAF snapshot. Returns candidate evidence, confidence, and mismatch flags without persisting caller query text. Address matches do not verify account control, bank-account ownership, payment authority, occupancy, or title.

Evidence packs and risk

create_evidence_pack

Build a source-backed Evidence Pack with the Due Diligence Record PDF, bundling PPSR / ABR / GST source checks, risk flags, confidence, and human-review items into a single auditable artefact stored in R2. Provide an ABN to verify an organisation, a VIN to verify a vehicle, or both for a full asset-finance review. Returns the pack ID and a download URL. This is the standard export path. Writes an export — not a safe-to-auto-run read.

create_due_diligence_pack

Assemble a full due-diligence Evidence Pack for a counterparty plus optional asset, fanning checks through the ABR, PPSR (org-only), and GST registration. Returns the complete pack with entity slices, asset slices, derived findings, and a shareable URL. Use verify_counterparty for a quick yes/no verdict; use this when a full audit trail and downloadable evidence are required. Writes an export.

create_asset_finance_evidence_pack

Legacy alias for create_evidence_pack. Creates the canonical signed / R2-backed Evidence Pack export and returns the same source-check, risk, machine-pack, human-pack, and audit-pack fields. Does not perform a separate live PPSR/ABR/GST search. Writes an export.

explain_risk_flags

Translate Hoist risk-flag identifiers into plain-English explanations tailored to the reader’s role (broker / borrower / operator). Deterministic and template-based — no generative text. Pass flag IDs as a CSV string via risk_flag_ids_csv.

check_verification_policy

Evaluate an Evidence Pack projection against a workflow verification policy. Returns pass, fail, needs_review, or missing_evidence with rule-level evidence.

Monitoring

monitor_entity_or_asset

Manage source-backed monitor subscriptions for entities or assets. Creates, lists, reads status for, or revokes monitor subscriptions without accepting caller-controlled user IDs.

confirm_no_changes

Recheck a captured monitor immediately before a release decision and report whether the current evidence still matches the baseline.

what_changed

Compare the first and latest monitor evidence snapshots for one owned ABN, ACN, or VIN within a time range. Use customer identifiers (abn, acn, vin); do not invent tenant or account IDs. Returns structured diffs with severity, risk-flag changes, and evidence references.

record_decision_memory

Record or list append-only reviewer-outcome events for Evidence Packs, risk flags, policies, source assertions, and source matches. Events are always scoped to the authenticated caller — both record and list operate only on the caller’s own decision memory.

Opportunity intelligence

find_opportunities

Find official-source tenders, grants, forecasts, and RFI-style opportunities that match a business profile. Returns award and incumbent context when available.

brief_opportunity

Brief one official-source opportunity with key facts, award history, incumbent posture, risks, gaps, files metadata, and evidence URLs.

find_incumbent

Resolve incumbent and award-history posture for a buyer/funder and category/program from official award evidence.

run_opportunity_monitor

Produce a read-only opportunity delta report for a business profile, including new, changed, urgent, and next-action items.

Account and receipts

show_due_diligence_receipt

Display the PPSR / ABN register-search audit chain for the caller’s account — initiated, completed, and failed searches with certificate hashes and costs. PII-free; no raw query payloads. This is not the assistant’s own tool-call access log — for that, use show_trust_receipt.

show_trust_receipt

Display the assistant’s own access log — every tool call it has made on your account, newest first (which tool ran, when, and which client invoked it). This is not the PPSR/ABN register-search audit chain — for register-search receipts, use show_due_diligence_receipt.

revoke_assistant_access

Disconnect this assistant from Hoist: permanently revoke this assistant’s OAuth grant and all its tokens. Takes effect immediately; the user must re-authorise to reconnect. No inputs required. Destructive and irreversible.

Payment and invoice limitation

verify_payment_or_invoice is an invoice-consistency workflow. It checks supplier name, ABN or ACN, GST cues, invoice totals, BSB format, account-number presence, remittance email, and reference text against available source checks. It does not prove that a nominated bank account belongs to the supplier. Confirm payment details through a known independent channel before sending money.

ASIC current-extract limitation

The ASIC company, business-name, AFSL, and ACL tools expose entity-intelligence checks against public snapshots. Public docs must not be read as a claim that Hoist has purchased or can retrieve a live ASIC current extract for every request. Fields marked verified matched the source snapshot Hoist checked. Fields marked not_verified need human review or independent confirmation.

Response fields

Tool results are structured for an agent to explain what it found and how current it is. Recurring fields across the source tools:

Field	What it tells you
plain_english_answer	A summary-first answer the agent can read back to the user.
data_mode	Whether the result came from live source traffic or a stored source snapshot.
source_citation / source_url	The authoritative source checked and a visible citation URL for human review.
retrieved_at	When the underlying source data was retrieved, so freshness is explicit.
confidence / risk flags	Confidence signal plus any mismatch or human-review flags.

Cost annotations

Tools that can dispatch paid searches set readOnlyHint: false (and, where relevant, openWorldHint: true) in their tools/list annotations, and require a cost confirmation before the billable call runs. Compatible hosts surface this as a price-confirmation prompt.

annotation shape

{
  "annotations": {
    "readOnlyHint": false,
    "openWorldHint": true
  }
}

Live-state summary

Hoist starts with PPSR, ABN, and public-register checks. Real source traffic, record retrieval, and Evidence Pack export are controlled by account access, source readiness, scope, and billing capacity.